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B) AMENDMENTS TO THE SPECIHCATION: 

Applicants submitthe following replacement paragraph for the paragraph of tiie 
Specification commencing on page 14, line 20 tfiereo^ and concluding at page 15, line 25, in 
which the sentence commencing at page 15, line 1 1 has been amended: 

— The operator of the relevant service network, e.g. service network 152 in FIG. 1, may 
desire to maintain a separate registration server, e.g. server 155 in FIG. 1, and to retain 
responsibility for user authentication and authorization. The service activation system 160 can 
provide a pro?^ server configured to permit HTTP traffic only between local hosts and 
registration server 155 in service network 152. The service provider operating service network 
152 would then be responsible for providing the appropriate registration information required for 
proper service selection to the service activation system 160. In this event, the service provider 
would also be responsible for notifying the service activation system 160 when service should be 
discontinued to the particular user. Alternatively, the DHCP server 161 in the service activation 
system 160 can interact with the registration server 155 using a back-end authentication protocol, 
e.g. the Remote Authentication Dial In User Service (RADIUS). See C. Rigney, A. Rubens, W. 
Simpson, S. Willens, "Remote Authentication Dial In User Service (RADIUS)," IETF Network 
Working Group, RFC 2058 (January 1997), which is incorporated by reference herein. The 
DHCP server can contain a RADIUS client and, thereby, leverage the large RADIUS embedded 
base used for dial access authentication. FIG. 7 illustrates this embodiment of this aspect of the 
invention in a flowchart corresponding to the flowchart shown in FIG. ^ 6. At 903, the DHCP 
server 920 generates a random challenge and includes the challenge along with the allocated IP 
address in the DHCPOFFER message. The DHCP client 910 generates a response to the 
challenge by encrypting the challenge with a key that is derived from the subscriber's 
authentication information. At 904, the client 910 includes the challenge, response, and IP 
address in the DHCPREQUEST message . The DHCP server 920 forwards both the challenge 
and response in a RADIUS_ACCESS_REQ message to a RADIUS server 930 in the selected 
service networic. The RADIUS server 930 either accepts or rejects the RADIUS request and 
responds accordingly at 906. If the RADIUS request is accepted, the DHCP server 920 sends a 
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DHCPACK message at 907 and the client 910 enters a bound state. If the RADIUS request is 
rejected, the DHCP server 920 sends a DHCPNACK message which informs the client 910 that 
the IP address that was allocated has been withdrawn. — 
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